Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
File: FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json)
Hash identifier: j3vrYUS0ecLykocCTcEsvLqxe5tm6lIgqOED9wDjHCw=
Subject key identifier: CA:20:68:17:E2:0D:6B:DA:7D:C7:C2:E9:95:59:77:92:67:D5:31:E0
Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Certificate serial: 0270
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
Manifest number: 026C
Signing time: Fri 31 Jan 2025 01:46:21 +0000
Manifest this update: Fri 31 Jan 2025 01:46:21 +0000
Manifest next update: Fri 07 Feb 2025 01:46:21 +0000
Files and hashes: 1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: hX04jUslJQHmRtGGypnkY2Pot1NKRDcNT28GzhtKK1M=)
2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: 65F2G59MHFVGLVKd/ikA3cZL7cCRB1lDJX3oDcAILQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 624 (0x270)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C
Validity
Not Before: Jan 31 01:46:21 2025 GMT
Not After : Feb 7 01:46:21 2025 GMT
Subject: CN=679c2b6d-f477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:95:38:70:fc:1e:16:38:e3:8f:db:d3:6d:93:
bc:bb:0a:d3:53:cb:a3:fe:19:23:14:d4:d8:cf:9b:
66:9e:f6:19:43:ed:20:5d:ed:c3:9b:d0:e2:14:4d:
cc:e7:2a:f8:e7:20:1a:6f:90:53:04:70:fb:53:6b:
b6:6b:04:3c:22:75:f5:fa:72:94:19:f3:fc:ca:d1:
85:d2:33:68:8f:4e:32:3c:89:25:d4:0f:49:05:25:
b8:5d:b3:01:1e:92:85:48:b3:11:c2:fa:83:4d:0a:
dd:7b:18:be:53:70:9e:ae:d7:28:32:39:e9:89:c4:
fe:1b:77:0d:82:9d:47:f5:9b:5f:89:3e:17:2f:d1:
5c:e1:c0:95:c1:b8:10:41:fe:77:27:96:4e:12:be:
ae:fe:bf:f7:bd:96:ab:f7:2b:93:93:4f:1b:28:3f:
9f:8d:0c:9a:7f:d6:38:3c:0a:a4:b8:a6:74:4e:53:
6e:59:b5:83:ac:3b:90:2d:a8:86:8e:5d:bc:e5:25:
01:4a:03:7b:1d:ae:a9:c8:ee:e7:72:9e:a2:90:c7:
31:9f:01:96:ab:c2:81:4b:6e:69:4e:17:84:34:d5:
3a:f1:a8:d4:96:b4:58:4e:6a:01:36:2e:05:30:83:
70:10:41:f3:a8:01:70:c9:32:86:df:32:d8:40:89:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:20:68:17:E2:0D:6B:DA:7D:C7:C2:E9:95:59:77:92:67:D5:31:E0
X509v3 Authority Key Identifier:
keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:f6:d0:ef:48:c2:61:8f:6a:ab:04:6e:08:3a:95:10:05:de:
5c:3e:0c:1e:06:44:f4:45:bc:5e:cd:2f:c3:d6:c8:a2:71:a8:
20:78:66:da:2b:1d:ba:5c:b8:9c:ba:0c:85:65:27:d4:18:62:
b1:35:ed:39:bc:11:69:64:a2:1e:09:13:c5:72:db:25:4e:1d:
ef:c7:06:8b:b8:72:e6:5c:ad:eb:fe:8d:3c:ad:ce:34:bf:33:
84:5f:b0:31:fb:6d:85:b5:10:d1:97:7f:a7:3e:35:76:6d:25:
9c:e3:16:3f:c6:67:f3:40:47:b7:b4:5e:21:65:72:5d:06:c6:
e5:11:be:43:0c:b6:0e:bf:c5:b3:b2:23:30:2c:b7:1a:06:2c:
94:7e:f1:14:db:b9:fa:fc:c1:18:57:77:3c:9c:eb:d9:ce:c1:
80:d3:23:16:57:ab:0b:9b:7e:f9:45:e4:0a:4c:9a:c0:ef:b1:
6d:4e:05:b5:a9:0b:70:9e:8c:c1:c9:7b:b0:c6:18:27:6f:b3:
e9:2d:54:0f:54:76:a6:6e:37:27:f5:b7:41:6a:c8:00:b3:5b:
28:7d:6c:ea:06:9a:9a:a9:a4:96:c3:78:c1:05:06:93:52:10:
16:cf:df:c8:23:7c:3b:a7:c0:be:98:a4:43:8c:56:ef:b4:cf:
64:e0:cd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:20:01 2025 by rpki-client